This news roundup describes real social-engineering operations where attackers impersonate trusted support teams to trick people into giving up secrets. One campaign uses email/SMS/WhatsApp plus AI voice calls pretending to be Apple Support to steal iPhone passcodes, while another uses phishing emails posing as an organization’s IT help desk to deliver malware that shows a fake Windows lock screen to capture passwords.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
Imagine this: your iPhone goes missing, and minutes later “Apple Support” is calling, texting, and WhatsApping you at the same time. That’s AnonyMousKIT, a phishing-as-a-service platform that impersonates Apple Support by email, SMS, WhatsApp, and AI voice calls, convincing people to read out their iPhone passcode so stolen phones can be wiped, unlocked, and resold. There’s a cousin to this: SynkLoader arrives as a fake IT help desk email from a lookalike Microsoft 365 tenant, then pops up a fake Windows lock screen that says “enter your password to unlock” and quietly steals it. Here’s the rule: if anyone, Apple, IT, anyone, asks for a passcode or password, stop and report it to our security team immediately through our normal reporting channel.
This roundup describes several real-world social-engineering and human-abuse techniques, including trojanized “installer” lures (ClickFix), large-scale phone-based investment fraud, and stalkers misusing Chrome Sync after brief physical access. The items include clear workflows that can be turned…
Researchers say a phishing-as-a-service platform called AnonyMousKIT targets people who recently lost or had an iPhone stolen by pretending to be “Apple Support.” The operation uses email/SMS/WhatsApp and AI-assisted voice calls to convince victims to share their iPhone passcode and follow a…
The roundup describes multiple real-world attacks where criminals manipulate people, not just systems, such as fake bank support calls that trick victims into installing phone malware, and “ClickFix” lures that convince Mac users to run malicious commands. It also highlights an AI-assisted…
Google tracked three suspected Russia-linked groups running targeted phishing that abuses real login and authentication features (app passwords, OAuth, and device codes) to get into accounts. The lures often look like legitimate conference or diplomatic invitations, and some campaigns spoof…
Research and incident examples show attackers increasingly using trusted collaboration tools (like Microsoft Teams and Slack) to impersonate IT/support or known community members, then push victims to phishing sites, approve MFA prompts, or run malicious files. Because messages come through…
North Korea-linked BlueNoroff is using fake Zoom and Microsoft Teams meeting pages shared from hijacked trusted contacts (often via Telegram) to trick victims into “updating” Zoom/Teams and running malicious commands. The phishing kit also fingerprints the victim’s browser to identify installed…
